NVD

Id
59801  
Name
CVE-2006-1079  
Description
htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-08  
Modified Date
2016-10-17  
Seq
2006-1079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307621 59801 CVE-2006-1079 [thttpd] 20060305 htpasswd.c security issues  View
307622 59801 CVE-2006-1079 [thttpd] 20060305 Re: htpasswd.c security issues  View
307623 59801 CVE-2006-1079 20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.  View
307624 59801 CVE-2006-1079 16972  View
307625 59801 CVE-2006-1079 thttpd-command-line-bo(25217)  View

Related JVN